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BtfiH A y v r cd tail i: MfH^-r- - h Kttffi ©IB« ft^ H £ m v * fcgBH & f? 
SUM., flirlBAy7Ttt«»^ny^©#JIS:#A, 
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mmmmmm n , mm^mmm^mn m^t. mmm3<D -? □ v * t. & Kii n 
zl t & mm t. -t z> mm^m^mm a 

- AJjztit^uvi? mzmteZ'J'av v fcbt, fata - htaiigiHcf ait £*i 

X L *~ a H ; 

X H *~ a M X0R F(a H' b i ) 
x M a L XOR G(x H> bp 

T&:/ny*&a L% trffaA^^TfaMcDiSi^n^^&bj, grffa#^^ap 

£F(a, b). G(a, b), -r-#©fSA£^> grffB^^^-h^^n »j ? £x H , * 

^ i: & nm t -r z mmm^mm a 

X L *~ V 

X M *~ a H X0R F( V b i ) 
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X H *~ a L X0R G ( a M' b p 
gP£F(a, b), G(a, b), -?-#<Z)fSA£^ mmmW&m<D U y * £x r 

P «- a XOR b, 

tj <- s[ Pi ] (l S i £ 8); 

u L - t 5 ||t 6 ||t 7 ||t 8 ; 

u x «- u x XOR SHR 8 (u x ), X={L, H} ; 

U X *~ U X X0R SHL i6^ u X^ ' X= * L ' H ^ ; 
U L *~ U H AND 0xfofofof0; 

U H *~ U L AND 0x0fofofof ' 
out <— || u^; 

A&-, P=P 1 IIP 2 IIP3llP 4 IIP 5 IIP 6 IIP 7 IIP 8 ,(l ^ i ^ 8)£U Stffy^Xffl 
Jlttj^&tj, t 2 , t 3 , t 4 , t 5 , t 6 , t y , t g> *fcfl:SM, 64 tfy hffi-e© 
xfcTy h#©*t$/:7K *2/7 b&^tl-rtlSHRx, SHL^^) 

ffffBA >y7 7 ^miJ-T £32:/ n y ? <D o *>, ±&*^»25# @7*D>y^ £|g32 
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$ *i H{KSL»J 7 s - * £ & #Nffi ^SfoM^ f * £ £ ic <fc o T l@ 

v. - 
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Mi:. 

BufH * n y * D X > MfHA y7? ^mSP ffi * & ffl V * T |&gB A y 7 7 © ftfflS 
MP*:, 

[f#aio] 

^y7 7t, 
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ttfe <d zf a y ^ a ^ 9- v -f iz & v > t , m a/ w y r ^mgp m -h z « v % t tufa a 
r t * t. -t & mmm & s -& -5 ^ d y ^ a 0 

X H *~ A M 

X M ^- A L XOR F(A M , Bj) 
X L «- A H XOR G(A M , Bj) 

M > t&^d^^$:a l , mmrtv7 7tm$w>mi7"uv ? zb v mmm&mmm 

BP $:F(A, B), G(A, B), -5 s - # OlXJl &«-, tm3mifeR©-tffi:/n y * &X H , 
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zzizmx.. sAT&mmitftot&mBitffiz-z 

P *- A XOR B; 

Tj «- S[Pj] (1 £ I £ 8); 
U R «- MDSjdj, T 2 , T 3 , T 4 ); 
U L - MDS 2 (T 5 , T 6 , T y , T g ); 

u H = x 1 || x 2 || x 3 || x 4 

U L = X 5 ' ' X 6 " X 7 " X 8 

OUT *- x 5 | | x 6 | | x 3 | | x 4 | | x x | | x 2 | | X y | | x 8 ; 

#tf)fSAS:^, P = II P 2 II P 3 II P 4 II P 5 II P 6 II P 7 II P 8 (1 ^ I 
^ 8)£U Stffy ^^©ffi^&±ffi*^T lt T 2 , T 3 , T 4 , T 5 , T g , T y ,Tg, £ £ 
ttS[X], MDSf?*JtCj:*gE&aP&MDS(T af T b , T c , T d )fc^) 

iSta^y ^7fre>tf>A;fri8:/n vt(Dr>*>. ±ft#>e>j£2#a:/n y Hi2 
#@^n«^, Hi8#g >y * SrBsv^fc^n'y * &-oTfeffl^n v V £ LT 

Hi5#0^n >y * ©±fii/2^"D v ? trm/2-fu >y ? SrAti#^.fc^n *y * 

ni8#@^n ? * tx^- hiHM^i^n >y * tawi&mmmmmmzm* 
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P <— A XOR B; 

Tj ^- S[Pj] (1 ^ I g 8); 
U H <- MDS^T^ T 2 , T 3 , T 4 ); 
U L - MDS 2 (T 5 , T 6 , T ? ,T g ); 
U H = X 1 1 1 X 2 1 1 X 3 1 1 X 4 ; 
U L = X 5 II X 6 II X 7 II X g ; 

Z «— Xg I I Xg I I Xg I I X 4 I I Xj I I X 2 I I Xy I I XgJ 
OUT «- Z XOR c; 

#©fSA£^ P = P : I I P 2 1 1 P 3 1 1 P 4 I I P 5 I I P 6 I I P ? 1 1 P g (1 ^ I 
^ 8)£U S/K^^^CDm^^^^^^Tj, T 2 , T 3 , T 4 , T 5 , Tg, Ty.Tg, £ £ 
&S[XK MDS^fJtCi:e^@l^$:MDS(T a , T b , T c , T d ), _tiajt$t£C£:^) 
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tiffany 7r<z>^a&l6:/n*/#i:U iSfB/W JB*T©&3I£ 

mi6#B^n ^i:^f- bmmB<Di?u v v £<D%mwmmmffi.nzfii<^ 
r t * mm. £ 1 s mmm^m,mm 0 

n£*m%.. 

mmrnm n & wib a * 7 r sb©^* £ m c * * 2 <n>^ - # c#« v x mm a * 

Ttra'*^-h»KA:fcSft&0MMfc, MgBSL«#J## i:&JSv>T, £<bfc, 
[oooi] 
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[0 0 0 2] 

U -ABf#(stream cipher)&ffi&£{c£^T, SL»©i&5H£«ifif 

y , hbr iz itmmm^m^m * & « * n % « v * & « wc j: y £ « s n * jh&sl 

.[0 0 0 3] 

$ p, izmmim%.&mm £ £ »ijAfst^n^ ictx. s £ ate » v y h u x r 

ti-£©*^ y y»^Hfr^©i&M^ ^ U if S i: £SH=gn x h 

[0 0 0 4] 

[»w b * e> i: -r s ^® ] 
t$ © r £ # # jt $ ti t v % & v % r=. & iz m & mm # * s < & £ . 

[0 0 0 5] 

ifciKl : Daemen, J., Clapp, C. , "Fast Hashing and Stream Encryption wit 
h PANAMA," Fast Software Encryption, 5th International Workshop, Procee 
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dings, LNCS1372, 61-74, Springer-Ver lag, 1998. 

: mmnwf- 5,454, 039# o 

[0 0 0 6] 

x r $ < * -5, tot? 7 -r - k a vt^yhv v 

X# (linear feedback shift register (LFSR)){C% £^^tz.m&$\M&j8MW. 

~$Lffi3 : B. Schneier, "Applied Cryptography," John Wiley & Sons, Inc., 1 
996. pp. 369~428„ 
[0 0 0 7] 

MMiltt, -fUvtm^ (block cipheOSffifSrSPJfflL/fcOFB^-KCOFB mo 
de), # ? > # ^ — F (counter ■ode)fc£##ie>;iytV*S#, ^©SLI^J&i&g 

ii7*n v v m^o&mmm nmvx&v. -mzmmnmmmzL&mmzsk^ 
y'uy>7m^&ffizmmvr-&ffiiz'D^xi*, ^cms, pp. 203~2<>6icsb«3 

frX^Z> a ^-<3D«l3ffi3®Stt, ^m2ilJ^TJC^f ^Cil^4{Cfa^$4x-2>Bi#CO 

[0 0 0 8] 

;&$£4 : B. Schneier, D. Whiting, "Fast Software Encryption: Designing E 
ncryption Algorithms for Optimal Software Speed on the Intel Pentium Pro 
cessor," Fast Software Encryption, 4th International Workshop, FSE* 97, H 
aifa, Israel, January 1997, Proceedings, Lecture Notes in Computer Scien 
ce Vol. 1267, Springer-Verlag, pp. 242-259, 1998„ 
[0 0 0 9] 

i*-*&*©J8ffl#SF<z>l£* U ££=klc, a-K7i7, h v^tifc 
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[0 0 10] 

*&m\*. *<z>-jiBa* teaser, 

77(^^ 5 E'JI«)i:Xf-KJ: y/I^^^^'JIt)©^^, Mc 
oV>T\ ( i) f 2 -*^3l©#ttS&n(fei: ;tk£32, 64,128, 256 try M£L/ch£ 

Uf- MEfftBB»)#, (ntf >y HA7J, ntf >y h ffi7J)©*ii»^W«FS:2|ffl, ■* 
[0 0 1 1 ] 

v -7 r H , A*;7 7© IB'[£fW t7xf-h Asm © 3B« W§ i: & M v * & 
© fH'H ft ^ i: & M v * fc &m £ ft v % m^ffim & ffiTJ f S A v ? r £ , ^n-y 



£ttll# 2001-3099777 



#2001—274433 



^ A © x ^ y zfiz v % t © «auR«l««3S*f $ ti Z> . 
[0 0 12] 

^D-y^i:, tciS'H S ft T v % 5 n y * & A# L T £ ttftf 5 A* SP 

VN^>^3©^D y 9 Ay !7TlCfB'i*3ftTV^:/a y V & K± £ UTgttf* 

1 <d m n m <d v * ? ft & <d m ± t. m 4 © m mm t c £ * ^» Mm & m ± * * m sp *u 

3£lc, _tfEx^-«MH£. ^3, £4©MM0>StfMg*;fl«, ^-ft^fttf) 
&HtgpicA;fr3ftfcyny 9 iHtm&Z>zfny>7 HLX. *-r- h3H«fiPJc|H« 

$ n s «fc e> jcKfi-r « mmm * m x z> „ 

[0013] 

o 

tti:«st-t, (b) y -y Yv^r%m*?K- w^Tmmiz&^Tmi&te. (<o 
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[0 0 14] 

^IB(SL^^^^S(P seudorandom number generator) : SLtfc#J (random number 
sequence ) (initial value) £#;LT. £gflm»J(pseu 

dorandom number sequence) ^^^"^-Si^fio 

M^SLifc (pseudorandom number) : =fe b < &j«<Z> tf V b^'JTfeU> £ 

Rmmm^ (symmetric-key encryption) : m^itmMt.^.^tmMizm^m^ 
^(plaintext) : Hf -SHb&StflN Sfettfc^ftfiS*©^-*'?* 1 .^ 7 s -f 

# )v i b $ ti tc v ;i/ * -r 7 -r 1 - # t) ^ * ti £ o 

-fu vvm^ : *£fcjcE-wy (E^j&tifc-^s 

Sr'yn * * ), Ifc^CTOI^^^ r fcT?«P^ft»a (encrypt i 

on) * teflt^-ft^S (decrypt ion) Hg-5f &fl5= 

<Z)MI^©^(Z)*/h>fit(^ra)^*^^^^^Jo nXncZ)MDS?T^#l»#n+lT* 
[0 0 1 5] 
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frmwommmmzmzm^rMm-tz* &m<DWiwizm^x^2>m-% r X 0R 

j telf y hZt<D%mWmmm (exclusive or)*mir 0 

m2\zm-f £ e> tc, #^M©SLI££/?S;§£g(20om, i:/ny*&64t?>y hi: 
L£££64t^y hX3^n^^CDfH'H^5:^x.-5X^- MH'llSl5(aT. J*^- 
h £V^) (201)& itF, 64 h? >y h X32^n y V ©IEll»!c £tft;t £ A y V 7 (202 
)> *t=— h(20'l)©WaP«JBS:JI«f-r«6X^- hMlg|5(203h ;t»;77©^ 
£ 3g$T-r 5 A >y -7 7 (204) , A y V 7 K± 5:^yf ASX^yf (207) £ * 

*l S: «ff » "T « «!|»fiP (2 1 4) t? *^ 3 4x « . 

hi:U ^t 1 — htf)*££ £3>fn y Ay 7 7<Z>:*:£3 £32^n * £ IT 
[0 0 16] 

X^-b(201)tt, h^m§P(203)(Z)M$:iTb^X-T— hffi 

£LTIBir*-<5. A^77tiit:fn>y ^^(210)Sr^-rsh, /tv77 
^$tgp (204) (DM &£t L v £ L TfH'ES-r -5 c M^rtaSSS (214) * n y ? M# (210 

(212) hX^- M201)ffl;fr©^T*l&38^Sa*&^y#2.S. ^-y77^M 
(204) li, *>f >y^ (207) <Z>^U#* IC^S CT^t A^jffl (64 \£.y 
0Ay7rOi^&ilffcft;<y7 7(2O2)©rt§S:^gtS. 
[0 0 17] 

Ay?7W8MW>'to\%. rtv -7 7 (202)^P>A7J$tife32^n*y *©e>*», _k 
fi*^»AT25^nv * g£32/n>y * S&iv^cT'n^ ?&t>fcoTfi©7'n 
«y^ltWS 0 H25^n >y * £:, S&32?"n v*®±fti:TffiS:A*i 
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[0 0 18] 

mi © ^ n - ^ -v - h iz % t -5 v n r a2©»f^ & m -r -5 . 

SUR£ffc2S« (200)1*, HlCDjfia^r*; :/102£Mby^y ^108 

X^y:7l02^£l04JC£V>T, ft»tt*©*J»-fk $L$(£j&<Z>;fe#>©i2y h7 

X^yt/102 : X-^- h(201). Ay 77 (202)£>ft^, fe 4:^^081(214) ft 
fflSO^y feU-fey hA;fr(211)lC<J: y U >y htS. "f*^T<Z>fcfy h 

X ^ >y ^ 1 03 : SLR^J &Mt§fii:lT, fltfllff SLfStfUS-Sf i: £ A* (2 1 
2)-T&. A:frJC±&64l^y h^ttW^&^^T, V U V V (210) £ AiJlTS 
o ?^iCAiJiCT^64tf-; h©ifi?:^^T, * n >y (210) £ AiJ-f<5„ 

IfcttTBflilC, SL»J##%-t&> T&64fcf>y MC##JU 2*n»y *T*A#-T 
£ „ 3*l£tf)^ny? #t3g fC A v ~7 T (202) ^ ^ ^ - h (201) grf j*© i: Js y fc 
S&JcmjtJia«N(213)S:A* , t«. *Hl^JTit 

(201), Xy7T(202)<Dftm*M&'*&o W«Ha»(214) te, 3 <Z) X 5^y 
V^Tli, hffi;fr<Z>±#64lfy ha H #x-r *y ^ (207) IC A;fr £ *l£ 

o 

[0019] 

WI^©^^>y^ , lcj3VNT^SLtS:^I?:ilSiyigb^ , rs„ 

*-r>y ^105 : N=0^e>«^T(^^y^l09)-rs^, -£ O T?J&V>fc <b*7^y ^1 
06fCiifr o 
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Xt V 7107 : Ay7y£.XT- h iC, VUyVm^rilXT- h MISP (203) £ 
A* «y7r ^^BP (202) tc £ & IH^I^ £ £ i*f^ £ Stri" £ <, 
XtV 710& : N=N-1 L/T, yi05(cM-5o 

±Mxtv 7105& hXTv 7iozv>m y jg b ic «fc y *i & - o jg*±©SB# 

* -tfBX t- y 7 105^ £ ^ y- y y 108 * t? ©— 5t ©iSf^ £ 9 9 > K £ ^ e> . 
[0 0 2 0] 

^■r-SA^ 7 T (202)©|E«1SJa6CDlt^l±64try h X18^n ^^iltS. 

Ay 7T*iftfiP(204)tt, A-/7T(202)^P 3 A^J$tlfel8-7'n^^©e)^, _L 
fi*»?>»^Ttl2, 12, 1&7UV* M*m^fe7uv ?Z—dT&(D7u H 

^n>^i:ltffi*ts. ^I57n 7 ^ ©±fii/27*n ^ i:T&i/2 

7u v v *Anwz.t=.7n y v £w,iz7u v v zmmmmmmhfcmm&mzm 

137U *j 9 ££IC, mi87Uy?£.. X4 y t (207)<Dftjj £. 

miuzm^tc-^v x rmmmmm*. m5<Dmmzit^xmmt>mmx$> 

[0 0 2 1] 

Hi2ti, urn© a y 7 t^mp&m v> f~m&<D$m&f&mw<DMm*M7jk-t s 

*)(Z)T*3dS 0 a^CD^EfclCfctf^ BlKD^n-^^- V<DXtV ^103, 1040) 

*y*y:/103: f&EA^*-#£LTH'ft#(1201)£, »t5^-^i:bT 
SL»J##(l202)$:AiJt--5 o *HJ6^«8T?l±, ttflttt, £L»J#^tt v^tifc 
128 If y h (2^0 v >7)£-t2> 0 Xt- h (201)lCtt, T#2:/n v * 
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128 \Zy V ?£K±-SrZ> 0 
[0 0 2 2] 

k h ii k l = m'mmi28¥y h) 

Y 2I «- K L »> 71 (0 ^ I < 9) 

Y 21+l *~ K H <<<? ( I + 1) (0 £ I < 9) 

B Q || Bj || ... || B 17 = Ayyrm(6A\fv hX18^n>y ^) 
Bj <- Yj (0 ^ I < 18) 

oi) <d mmm & -tftizmwrz r t ^ & 

L # L . a* 977 ^$I3IS (204) Z-m^TAyyrO) mmm tcjsfrt- £ 
^ § r £ T* # -5 o _tsBtf> J: o iz L X %M L £ IMSLIfc£j&Sg« tt. ^n-y) 
[0 0 2 3] 

HH3li, A^7 7'^^BP(204)(Z)ftB(Z)^$:M^i--g> : fo©'r^>§o ^£>££, 
tSl^i-^Ay {202)<Dm'BMi$<DMf8,m4¥v h X 16^n y 9 

A^7r^g|g|5(204)tt, Ay 7 T(202);fr£A;fr£*lfcl6:/n _L 
&^f§:x.T3!4, 10, 16^n^^@(t-^tD*.> B 3 , B g , B 15 )?:i^^D>y^ 
§-oTS©^n7^illTffi*n. ^D>y^(B 3 )^87*n>y^(B 
7 ) $r#ftfi^S^Lfc^m^$:^5^n y * (-t&fc*>Y 4 ) £. LtffiMI.. * 
mi4^n y Z (B 13 )<D±m/2-7u y V tTfil/2^D y V &A*l#X.£yn 

y z ii^io^n y v (b 9 ) zmmwmmm Lt^m^m^^mn-fu y z (y 10 ) h l 

Lf~WLnmmitmi-7n y V (Y 0 ) h ITEfiiJtS. 
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[0 0 2 4] 

Hl4tt, 013© /W:7 73S*»fc»^fc»&©ft»£j*«« (1400) <z>«j£&M 

*54x**J^b&3iW'r*o fc£U 01CD7D-^- h<Z);*^y :7103, 104£ 
It, ®15©X-ry :7l601~1604#H??3*l£ <) 

^1601 : i&gAr7* £ LTHWfg(1502) SrH^SP (1504) 
*. H'f#$gW:128tfy hil-TSa «fiNR(1502)&K, C &64hfy h©Ji», 64b? 
y h^©*MHI2/7 b*<«s &mmis7 b*>»£m?£g. H^m3P(1504) 

3 W T* it 192 If y h ) <D ? - # MZ £ . 

[0 0 2 5] 

K H MK L =K, 

A H *~ K H' 
A M *~ K L' 

A L (K H <<< 7) X0R (K L >>> 7) X0R C ' 
ftr^Ufc^-^Afc:*^- h^3P(203)fCAiJl-£ o 

Xf v ^"1602 : A y V TgP (202) s\(D K± 

Y Q || Yj || ... || Y 15 = A>y7 7i(64lf7hXl6^D^^) 
fc^SSIU JifH^-^A?:^^- h^mgP(203)-eitlI^glLfct»CO$:R i , RjCDJi 
ftfr&64tf vy h^Ti:{CR Hi , R Mi , R Li ilbfei:^, TfB©<i:e>{C, ;t»;7 7S(20 
2)^R Hi S:Tffi^e)|RtCA*b, Ay 7 rfiP(202)tt^4x?> S^ftS. 
[0 0 2 6] 

Y i «" R H(15-i) (0 ^ 4 < 16) 

^^^^1603 : ^^A^^-^T*&SSL»'J#-^(1503)S:A7J , r-5o 
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* it 

ttTftt, SLUt^J##(1503)lil28tfy htf-So 5L»J##Qtt^^P(1504)(C 
<fc »J&©J:3fc&3lS:&T192fc:y MCfffiJIStU h^»P(203){CAij£ 

Q H I I Q L = Q 

D R - R H16 XOR Q R , 

D M *~ R M16 X0R Q L' 

D H <- R L16 XOR (Q H «< 7) XOR (Q L »> 7) XOR C , 
D = D H | | D M | | D L 

$m?m^Qtfwn ^ti^^-^D&x^-h mmm (203) t* lem^m Ltc*><D 

&E£U EfcX^- h§P (201) 
[0 0 2 7] 

^^•^^1604 : X^^^1602i:1603T'©MM^^AiJ$tlfeX^- h ^P, 

y 7 t m&wn z i6iaMtr-r £ . 

?&t>*>. Ay773l5i:xf-h$i:, ^n»>fifi:^f- h^&gp(203) 
i: A v y t (202) &c «fc £ ^tMllS* l*J^ £ Xffr £ , 

[0 0 2 8] 

[0 0 2 9] 

T07;i/^'JXAT', $ (DfZAZ, I UiM^ (concatenation, 5g*£ 

^tl^tl^l-o ^-r-- h(201)(Z)^i$:n- Ft§ 0 
a R II a M II a L = X^- h^i(192tf -/ h ) 

X L *~ V 

X H *~ a M X0R F ^ a H' b i^ 

x M «- a L XOR G(x R , bj)(^^Li^j) 

x M Sr§|$^SL»Ji:LTffi±L, ?^^f-bii:tt, x h 1 1 X M 1 1 x L* m * 
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[0 0 3 0] 

s\<DAjjH>7U v *t+i(*fett-£CD&©9#> K)tcfcW5Fgg#(40i)/\<z>A:fc 

«ra&3S*&s*ifc«, * n v ^t+nc^3VATFg§tS:(40i)©m^;ii^ffi^i&siftisti 
•5 #>, FMifc (401) £ gh& (402) fc. teHfc * & e> * £ i: #M * b 

[0 0 3 1 ] 

®4teX^- h^m§P(203)©^©#^$:^f 5EIT*&5. B4©«j£tCi3V* 
T, X^--h(201)©^ifttt^©J:^tCL/Tff^. *<r— h (201) ©-fit £ □ - K"T 
£„ 

a H " a M " a L = hit (192 tfy h) 

X L *~ V 

x M ^- a H XOR F(a M , bj) 

x H <- a L XOR G(a M , b.) (££Li*j) 

(40l)^\cDA^i:GMiS:(402)/\©A*i:* , :|BlC^^y, Mm<DmiHttf»Smz& 

[0 0 3 2] 

®9«*-r- h^m^(203)«)fl&(Z)^S:M^-rSglT*&Sc 090>#j£JCj3V* 
T, h(201)CD^te&©J:c>{CLTff5o Xf - M201)©te&n- K"T 

&. 

A H I I A M | | A L = Xf" h-f»(192lfy h) 
X H *~ A M 

X M «- A L XOR F(A M , Bj) 
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X L «- A R XOR G(A M , Bj) (tctdLI * J) 

II x M || x L £m#ir£ 0 

[0 0 3 3] 

±SBH3, 04(C £ V ^TFHUffc £ GMmC-Zz. e>tl*^V7T*» & © A# (215) & 

±1803, H4JC^i-«3g^©«K«^S:«fflUT%^V%. 
[0 0 3 4] 

±ffiH3, 04-effiv%feFHSSc(*fcttGB8»)-©«5tS:06Jc«^i-S o 
jtfy^X, Sl(601)~S8(602)tC J: U *«l^SK« S fj ^ . Sjtfy?;* S1(601)~S8( 
S/ify LTfcfc, 

^Ci)^5 : J. Daemen, V. Rijmen, "AES Proposal: Rijndael," The first AES C 
andidate Conference, available at http://www.esat.kuleuven.ac.be/~rijmen 
/rijndael/rijndaeldocV2.zip.(-)Rijndael"-^t>tlTV^-5J^T©^^^?:^■^) £ 

[0 0 3 5] 

S [256] = 

{ 82, 9, 106, 213, 48, 54, 165, 56, 

191, 64, 163, 158, 129, 243, 215, 251, 

124, 227, 57, 130, 155, 47, 255, 135, 

52, 142, 67, 68, 196, 222, 233, 203, 

84, 123, 148, 50, 166, 194, 35, 61, 

238, 76, 149, 11, 66, 250, 195, 78, 

8, 46, 161, 102, 40, 217, 36, 178, 
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118, 


91, 


162, 


73, 


109, 


139, 


209, 


37, 


114, 


248, 


246, 


100, 


134, 


104, 


152, 


22, 


212, 


164, 


92, 


204, 


93, 


101, 


182, 


146, 


108, 


112, 


72, 


80, 


253, 


237, 


185, 


218, 


94, 


21, 


70, 


87, 


167, 


141, 


157, 


132, 


144, 


216, 


171, 


o, 


140, 


188, 


211, 


10, 


247, 


228, 


88, 


5, 


184, 


179, 


69, 


6, 


208, 


44, 


30, 


143, 


202, 


63, 


15, 


2, 


193, 


175, 


189, 


3, 


1, 


19, 


138, 


107, 


58, 


145, 


17, 


65, 


79, 


103, 


220, 


234, 


151, 


242, 


207, 


206, 


240, 


180, 


230, 


115, 


150, 


172, 


116, 


34, 


231, 


173, 


53, 


133, 


226, 


249, 


55, 


232, 


28, 


117, 


223, 


110, 


71, 


241, 


26, 


113, 


29, 


41, 


197, 


137, 


111, 


183, 


98, 


14, 


170, 


24, 


190, 


27, 


252, 


86, 


62, 


75, 


198, 


210, 


121, 


32, 


154, 


219, 


192, 


254, 


120, 


205, 


90, 


244, 


31, 


221, 


168, 


51, 


136, 


7, 


199, 


49, 


177, 


18, 


16, 


89, 


39, 


128, 


236, 


95, 


96, 


81, 


127, 


169, 


25, 


181, 


74, 


13, 


45, 


229, 


122, 


159, 


147, 


201, 


156, 


239, 


160, 


224, 


59, 


77, 


174, 


42, 


245, 


176, 


200, 


235, 


187, 


60, 


131, 


83, 


153, 


97, 


23, 


43, 


4, 


126, 


186, 


119, 


214, 


38, 


225, 


105, 


20, 


99, 


85, 


33, 


12, 


125} ; 



7,7-- MB'M^'Dtf)A;fr£a, Ay 7TfrZ><DAjj*K P=pl||p2|| P 3 
I Ip4| |p5| |p6| |p7| |p8,(l ^ i ^ 8)£U StfyVX SI (601) — S8(602)<Z)8fcT 
V hft;fr£±{£fr£>-£*l-£*Ul, t2, t3, t4, t5, t6, t7, t8£U£££, 06 

k ^ -r^m^m it t <d & o &c % s = 
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[0 0 3 6] 

TSB©»^*Mffi#rs[x] jfcSstfy Sl(601)~S8(602)(£>8tf-/ hfBiJ^S 
U r SHR x , SHL x j \t*tl-€tl64\£y hiplT*0)xlf y K h 

P «- a XOR b; 

t } - S[ P j] (1 £ i S 8); 

U H *~ *l' 1*211*31 |t 4 ; . 

»L ^ *5ll* 6 ll*7ll*8 ; 

U X *~ U X X0R SHR s( u x)' X={L ' H * ; 

U X U X X0R SHLjgdij), X={L, H} ; 

u L «- u R AND OxfOfOfOfO; 

u R «- u L AND OxOfOfOfOf; 

out <— u H 1 1 u L ; 

H4lC^"r*5ttCj3WT, FMiS:(401)i:GMiSC(402)i:$:|Hf^BgfS[i:L, 

$ v a (D v , #Jjra>£ &c & ? n ^ * fit ( ^ .9 y KiBt) & 4> < £ z. t. ifi «Tfg x* 

[0 0 3 7] 

F05^(4Ol)(^feliGS5IS:(4O2))©ftfi<D«^$:llIlO{C^t-o 

7}f^^X100nc«fcy#«g^g|S:ffe)o #CtC, Stffy *;U001(Z>ffi;*j£32lf y h 
ri:lc«g^mi002{ci:y^^mS:^e)o. $^ic, 32hfy MU*^ti^ti±fi 
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[0 0 3 8] 

7-*z&^ti : b$bmmzMW-*2>m]&&mii Lx^a^nx^^^a^D-mx^ 

(Z>ftA£-, P = Pj 1 1 P 2 1 1 P 3 1 1 P 4 1 1 P 5 1 1 P 6 1 1 P 7 1 1 P 8 (1 ^ I ^ 
8)£U S3tfy ^XCDffi^fcJL&^Tp T 2 , T 3 , T 4 , T 5 , Tg, Ty , Tg, ££«S[ 
X], MDSe?rjfC£6^g|§P£MDS(T a , T b , T c , T d )£Lfc££, mmzB-t^mm 

m (ij^T <z> J: e> {c & m-& £ o 

[0 0 3 9] 

TfH©^4»^fH^rs[x] j&Stf^y^;* S(1001)tf)#8lf y hmij£^„ 
P «— A XOR B; 

Tj *- S[Pj] (1 £ I £ 8); 
U H «- MDSjCTj, T 2 , T 3 , T 4 ); 
U L - MDS 2 (T 5 , Tg, T ? , T g ); 

u H = x 1 || x 2 || x 3 || x 4 
u L = x 5 | | x 6 | | X ? | | x 8 

OUT «- x 5 || x 6 || x 3 | | x 4 || x x || x 2 || X y || X g ; 

£e>ic, ^«||g*OUT«:ffi*-rsifftc, se>JC3fe«Ci:fiD»ffifl5»3S5fli!R||cS:ff 

[0 0 4 0] 

C F , C G t 

C P = 0xBB67AE85 84CAA73B, 
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C G = 0x3C6EF372 FE94F82B 
[0 0 4 1 ] 

[0 0 4 2] 

m icis c t *rtg •& o 

g|g#8B«gttiCf&itt $ ti £ y O v A & mn-t 5 ^ £ C J: *J f £ . 
#ffi«jK#»*i6*&^LTIB««#^&IB1»$l*K:n- Katie. ft 

a 

[0 0 4 3] 
[0 0 4 4] 



2 6 
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#V%T¥:fc7 I -*(903)&HriHt , r'&. ®8£^oTI^#^##t3g=gS(904)<Z)|& 
[0 0 4 5] 

m^u^mmmm 004) a# (1003) c r ©^itm^^- # 003) )tmvn 

ifc«ci£«(200)lC, ±ffi«tfil»(1001)i:gL«^J##(1002)^ffi*ia»S:^^« 

ifcjcj: yfr^. ^stifeanKa»^i(ioo5) t? 2 -* (903)£ £#MtBi$fi3i*n 

"T £ d £ C J: o T ffiij (1004) H LTHf #^C7 r — # (1006) £ Hffi U 

7,7 L ^zf3: T-Zmm&lt. Rf#:iC7-*-#(1006)£*y N>7-*>f>#-7 
x-X=£S(905)£^T, * >y h (906) ISTf 1 - *£fe#lCj£*rrs 

o 

T^MbfeBt^^^-^dOOe)^, ±fa#*ff«&#;tfeM&JIS«(9<>4)«: 

fflVMTlg#-r£,, H8&«oT«p««t-^«aSI*(904)©|&^S:«Wr*. 
[0 0 4 6] 

Bf^^^MSIgfi(904)«, A;fr(1003)(r(Z)«^M#£^-# (1006)) 
D:R£©M(SL»J(1005)£, «P#ftl*fcH«ltC^^*. ^snfe*fiaa3R 

#i (1005) nm-^Jc?- % (1006) ^ zmmmwimm-tz z. tiaot m# (1004) * 

LTtS#l£irfcfc>l3¥£^-#(1011)£JlffiU tf}*t5. 
Xf^5: ^-#^t#«> tg#fl:3*i,fe¥£^-#&lf£^fi(912)T*lS£ 
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[0 0 4 7] 

201-*^- k zw-^yyr. 203-^^-h^gp 

, 204-71 y 7 T^maP, 206-ffiij-T«SL8Jt^ 207-*>f 210-*n*# 
AiJ, 211- U -fey hAA, 212-A?J> 213-5p^©^$'ff#N©A*> 214-frj 
ffHBK 401-#JSJg3K»F, 601~604-8lf y h<Z>«#|^ 901-^- # 
, 902-|Bl»i£S, 903-t-*-^, 904-Bf#^#^T ! S^fi, 905- * y h ? - ? >f 
>3t-7i-^lt, 906-*yh>7-?, 907- 5 s - * ^f§^g> 908-*>yh 
!7-^>f>*-7i-^S, 910-SattSSfi, 912—r-#:f?£36iB, 1001- 

mmm. ioo2-sl»j##, ioo3-atj^-#> ioo4-m;*77 s -#. 

'.CHI] 

[0 2] 

iias#!itcfewsiHKa«^$i«cD«Ett«^H-e*«. 

[03] 

o 

[04] 

CH5] 

HifcM IC # S Sg&SL$t£/&Iigtt © a' y 7 t mm%V <Dm&, & &* 8EW&0T* & S 

o 

[06] 
[0 7] 
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So 

cms] 

[09] 
[010] 

[012] ■ 

[013] 
[014] 

[015], 

36 -S a 
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[mi] 




i 
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[02] 



211 
I 



7 



210 



213 



212 



N 



A* 



02 

«&SLi&£j£5£S 200 



Z 



201 



dp 



215 203 









ma 









3\H 



214 



207 



204 



* 



206 



202 



2 
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[03] 




3 
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CH4] 



04 




4 
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mw&2 o o i 
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[06] 



m6 




6 
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[07] 



mi 




7 
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[08] 




8 
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[09] 



09 
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[01 0] 



1001 



1002 



IS io 



(«*#SllIJHiaF#fT$iJ) 




1 0 
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4 ♦ 



[011] 



B 0 B 1 B 2 B 3 B A B S B 6 B 7 B^, B |( B„ BJ^W w 



202 




Y 0 Y,Y 2 Y 3 Y 4 Y 5 Y 6 Y 7 Y 8 



202 



My* 

207© 



204 
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[01 2] 



211 



z 



A* 



1202 



A* 



r 

1201 



12 12 

1200 



201 



214 



ft 



1203 



1204 



J 



2k_ 



204 



> *v7T&m& — i 



7^ 



207 



206 



202 
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[01 3] 



013 



B 0 B^^B^B^ B 8V B, B 10 B 1I B 1 ^ l jB 1 ^ lj 



202 




YoY.VaYjY^Y^Y, 



Y 9 Y w Y t jY 12 Y^if 14 Yi 5 



202 



207(35 



204 



1 3 . 
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[014] 
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@14 

g&SLSS[£fi££B 1400 



210 211 



I 



1503 



j 



1502 



213 



201 



m 



7 



214 



1501 



1204 T^V* 



St; 



203 



1504 
204 







207 



206 



202 
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fflSE# 2001-3099777 



[01 5] 



#2001—274433 



015 



Step 102 




XT- 



XT— K7>SSr£l6@f73 




Step 105 



1601 



1602 



1603 



1604 
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mm) 

mvk^®.] 

y 7 7§t3^32'Xnt: y hT*&U> (i i) * H v VWffi\Z «fc »J , B?|flt^&BSfMt+l 
^©X^- ^fcA©^^- h^glBPU^- h (n 

[aHRBU S3 
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#fFM©§# 4M 2001-274433 

50101331614 



ffi^W H-bS^ilJS? 0 0 9 6 

ffr&B ¥f£l 3^ 9H14H 

[HfflB] ¥^13¥ 9^110 
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m m A 



(0 0 0 0 0 5 1 0 8) 



1. «5^H 1 9 9 0^ 8H31H 
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